| CVE-2022-46882 |
A use-after-free in WebGL extensions could have led to a potentially exploitable crash
|
9.8
Critique
|
22 déc. 2022 |
| CVE-2022-46881 |
An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46880 |
A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.*Note*: This…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-46872 |
An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via…
|
8.6
Élevée
|
22 déc. 2022 |
| CVE-2022-46878 |
Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-46875 |
The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-46874 |
A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45412 |
When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45411 |
Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to…
|
6.1
Moyenne
|
22 déc. 2022 |
| CVE-2022-45421 |
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45410 |
When a ServiceWorker intercepted a request with FetchEvent, the origin of the request was lost after the ServiceWorker…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45420 |
Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45409 |
The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-45408 |
Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45418 |
If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the…
|
6.1
Moyenne
|
22 déc. 2022 |
| CVE-2022-45406 |
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while…
|
9.8
Critique
|
22 déc. 2022 |
| CVE-2022-45405 |
Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45416 |
Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45404 |
Through a series of popup and window.print() calls, an attacker can cause a window to go fullscreen without the user…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-45414 |
If a Thunderbird user quoted from an HTML email, for example by replying to the email, and the email contained either…
|
8.1
Élevée
|
22 déc. 2022 |
| CVE-2022-45403 |
Service Workers should not be able to infer information about opaque cross-origin responses; but timing information…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-42927 |
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a…
|
8.1
Élevée
|
22 déc. 2022 |
| CVE-2022-42932 |
Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-42929 |
If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-42928 |
Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have…
|
8.8
Élevée
|
22 déc. 2022 |